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What Is Claimed Is: 

1 . A method of distributing revocation state information, the method 
comprising: 

receiving first update scheduling information from a first party; and 
sending digital certificate revocation state information to the first 

party according to a schedule that is based on the first update scheduling 

information. 

2. The method of claim 1 , wherein the method further comprises: 

receiving second update scheduling information from a second 
party; and 

sending digital certificate revocation state information to the 
second party according to a schedule that is based on the second 
update scheduling information. 

3. The method of claim 2, wherein the digital certificate revocation state 
information is sent to the first party on a different schedule than the 
digital certificate revocation state information is sent to the second party. 

4. The method of claim 2, wherein the schedule provides that the digital 
certificate revocation state information is sent to the first party at an 
interval that is less than every 30 seconds. 
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5. The method of claim 2, wherein the schedule provides that the digital 
certificate revocation state information is sent to the first party at an 
interval that is less than every 5 seconds. 

6. The method of claim 1 , wherein the method further includes receiving 
new update scheduling information from the first party, and wherein 
when the new update scheduling information is received the digital 
certificate revocation state information is sent to the first party according 
to a schedule that is based on the new update scheduling information. 

7. The method of claim 1 , wherein the digital certificate revocation state 
information sent includes a certificate revocation list. 

8. The method of claim 1 , wherein the digital certificate revocation state 
information includes information identifying revoked certificates. 

9. The method of claim 1 , wherein the digital certificate revocation state 
information sent includes delta-certificate revocation list information. 

10. The method of claim 1 , wherein sending digital certificate revocation 
state information includes sending information using multicasting. 
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11. A method of distributing revocation state information, the method 
comprising: 

receiving update scheduling information from a digital certificate 
verifier; 

assembling certificate revocation information on an ongoing basis; 

and 

capturing a state of the certificate revocation information as a 
certificate revocation list and transmitting the captured certificate 
revocation list to the digital certificate verifier on a schedule determined 
by the received update scheduling information. 

12. The method of claim 1 1 , wherein the captured certificate revocation list is 
transmitted using multicast broadcasts. 

1 3. The method of claim 1 2, wherein the captured certificate revocation list is 
a delta-certificate revocation list. 

14. The method of claim 1 1 , wherein said update scheduling information is 
received during a verifier subscription process. 
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1 15. The method of claim 14, wherein the method further comprises receiving 

2 new update scheduling information from the verifier, and wherein the 

3 revocation state information is transmitted according to a schedule that is 



4 based on the new update scheduling information. 

1 1 6. A method of verifying the validity of a certificate for a transaction, the 

2 method comprising: 

3 sending update scheduling information to a certificate authority; 

4 and 

5 receiving certificate revocation information from the certificate 

6 authority at scheduled times based on the update scheduling information 

7 at scheduled times. 

1 17. The method of claim 16, wherein the method further comprises: 

2 receiving a digital certificate from a subscriber; and 

3 determining whether the digital certificate was revoked based on 

4 the received certificate revocation information. 
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1 1 8. The method of claim 1 6, wherein said sending update scheduling 

2 information includes determining the update scheduling information 

3 based on a potential cost of reliance on a revoked certificate. 

1 1 9. The method of claim 1 5, wherein the method further comprises: 

2 receiving a digital certificate from a subscriber; 

3 determining whether the transaction is associated with a value 

4 that is above a pre-determined threshold level; and 

5 verifying the validity of the digital certificate after receiving a next 

6 update of certificate revocation information from the certificate authority. 

1 20. An article of manufacture comprising a computer-readable medium 

2 having stored thereon instructions adapted to be executed by a 

3 processor, the instructions which, when executed, cause the processor 

4 to: 

5 receive first update scheduling information from a first party; and 

6 send digital certificate revocation state information to the first party 

7 according to a schedule that is based on the first update scheduling 

8 information. 

1 21 . The article of manufacture of claim 20, wherein the instructions stored on 

2 the computer-readable medium further include instructions adapted to be 

3 executed by a processor to: 
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receive second update scheduling information from a second 
party; and 

sending digital certificate revocation state information to the 
second party according to a schedule that is based on the second 
update scheduling information. 

22. The article of manufacture of claim 20, wherein the first interval is not 
equal to the second interval. 

23. The article of manufacture of claim 20, wherein the instructions stored on 
the computer-readable medium further include instructions adapted to 
be executed by a processor to receive new update scheduling 
information from the first party, and wherein the digital certificate 
revocation state information is sent to the first party according to a 
schedule that is based on the new update scheduling information. 

24. The article of manufacture of claim 20, wherein the digital certificate 
revocation state information sent includes delta-certificate revocation list 
information. 
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